Accurate & Verified 2024 New TA-002-P Answers As Experienced in the Actual Test!
TA-002-P Certification Sample Questions certification Exam
NEW QUESTION # 31
What feature stops multiple users from operating on the Terraform state at the same time?
- A. Version control
- B. Provider constraints
- C. Remote backends
- D. State locking
Answer: D
Explanation:
State locking prevents other users from modifying the state file while a Terraform operation is in progress. This prevents conflicts and data loss1.
NEW QUESTION # 32
Terraform init can indeed be run only a few times, because, every time terraform init will initialize the project
, and download all plugins from the internet repository , regardless of whether they were present or not , and this increases the waiting time
- A. True
- B. False
Answer: B
Explanation:
Explanation
Re-running init with modules already installed will install the sources for any modules that were added to configuration since the last init, but will not change any already-installed modules. Use -upgrade to override this behavior, updating all modules to the latest available source code.
https://www.terraform.io/docs/commands/init.html
NEW QUESTION # 33
You want to use terraform import to start managing infrastructure that was not originally provisioned through
infrastructure as code. Before you can import the resource's current state, what must you do in order to prepare
to manage these resources using Terraform?
- A. Modify the Terraform state file to add the new resources.
- B. Run terraform refresh to ensure that the state file has the latest information for existing resources.
- C. Update the configuration file to include the new resources.
- D. Shut down or stop using the resources being imported so no changes are inadvertently missed.
Answer: C
Explanation:
Explanation
The current implementation of Terraform import can only import resources into the state. It does not generate
configuration. A future version of Terraform will also generate configuration.
Because of this, prior to running terraform import it is necessary to write manually a resource configuration
block for the resource, to which the imported object will be mapped.
The terraform import command is used to import existing infrastructure.
To import a resource, first write a resource block for it in our configuration, establishing the name by which it
will be known to Terraform.
Example:
resource "aws_instance" "import_example" {
# ...instance configuration...
}
Now terraform import can be run to attach an existing instance to this resource configuration.
$ terraform import aws_instance.import_example i-03efafa258104165f
aws_instance.import_example: Importing from ID "i-03efafa258104165f"...
aws_instance.import_example: Import complete!
Imported aws_instance (ID: i-03efafa258104165f)
aws_instance.import_example: Refreshing state... (ID: i-03efafa258104165f)
Import successful!
The resources that were imported are shown above. These resources are now in
your Terraform state and will henceforth be managed by Terraform.
This command locates the AWS instance with ID i-03efafa258104165f (which has been created outside
Terraform) and attaches its existing settings, as described by the EC2 API, to the name
aws_instance.import_example in the Terraform state.
NEW QUESTION # 34
Terraform import command can import resources into modules as well directly into the root of your state.
- A. False
- B. True
Answer: B
Explanation:
Import will find the existing resource from ID and import it into your Terraform state at the given ADDRESS. ADDRESS must be a valid resource address. Because any resource address is valid, the import command can import resources into modules as well directly into the root of your state.
Terraform is able to import existing infrastructure. This allows us take resources we've created by some other means (i.e. via console) and bring it under Terraform management.
This is a great way to slowly transition infrastructure to Terraform.
The terraform import command is used to import existing infrastructure.
To import a resource, first write a resource block for it in our configuration, establishing the name by which it will be known to Terraform. For example:
resource "aws_instance" "import_example" {
# ...instance configuration...
}
Now terraform import can be run to attach an existing instance to this resource configuration:
$ terraform import aws_instance.import_example i-03efafa258104165f
aws_instance.import_example: Importing from ID "i-03efafa258104165f"...
aws_instance.import_example: Import complete!
Imported aws_instance (ID: i-03efafa258104165f)
aws_instance.import_example: Refreshing state... (ID: i-03efafa258104165f) Import successful!
The resources that were imported are shown above. These resources are now in your Terraform state and will henceforth be managed by Terraform.
This command locates the AWS instance with ID i-03efafa258104165f (which has been created outside Terraform) and attaches its existing settings, as described by the EC2 API, to the name aws_instance.import_example in the Terraform state.
As a result of the above command, the resource is recorded in the state file. We can now run terraform plan to see how the configuration compares to the imported resource, and make any adjustments to the configuration to align with the current (or desired) state of the imported object.
https://www.terraform.io/docs/commands/import.html
NEW QUESTION # 35
You have created two workspaces PROD and DEV. You have switched to DEV and provisioned DEV
infrastructure from this workspace. Where is your state file stored?
- A. terraform.tfstate.d
- B. terraform.tfstate.DEV
- C. terraform.d
- D. terraform.tfstate
Answer: A
Explanation:
Explanation
Terraform stores the workspace states in a directory called terraform.tfstate.d. This directory should be treated
similarly to default workspace state file terraform.tfstate
main.tf
provider.tf
terraform.tfstate.d
DEV
terraform.tfstate # DEV workspace state file
PROD
terraform.tfstate # PROD workspace state file
terraform.tfvars # Default workspace state file
variables.tf
NEW QUESTION # 36
What are the benefits of using Infrastructure as Code? (select five)
- A. Infrastructure as Code provides configuration consistency and standardization among deployments
- B. Infrastructure as Code gives the user the ability to recreate an application's infrastructure for disaster
recovery scenarios - C. Infrastructure as Code allows a user to turn a manual task into a simple, automated deployment (Correct)
- D. Infrastructure as Code is easily repeatable, allowing the user to reuse code to deploy similar, yet
different resources - E. Infrastructure as Code easily replaces development languages such as Go and .Net for application
development - F. Infrastructure as Code is relatively simple to learn and write, regardless of a user's prior experience with
developing code
Answer: B,C,D,F
Explanation:
Explanation
If you are new to infrastructure as code as a concept, it is the process of managing infrastructure in a file or
files rather than manually configuring resources in a user interface.
A resource in this instance is any piece of infrastructure in a given environment, such as a virtual machine,
security group, network interface, etc. At a high level, Terraform allows operators to use HCL to author files
containing definitions of their desired resources on almost any provider (AWS, GCP, GitHub, Docker, etc) and
automates the creation of those resources at the time of application.
NEW QUESTION # 37
You are using a networking module in your Terraform configuration with the name label my-network. In your main configuration you have the following code:
When you run terraform validate, you get the following error:
What must you do to successfully retrieve this value from your networking module?
- A. Define the attribute vmet_id as a variable in the networking modeule
- B. Change the reference value module.my,network,outputs,vnet_id
- C. Define the attribute vnet_id as an output in the networking module
- D. Change the reference value to my-network,outputs,vmet_id
Answer: C
Explanation:
This is what you must do to successfully retrieve this value from your networking module, as it will expose the attribute as an output value that can be referenced by other modules or resources. The error message indicates that the networking module does not have an output value named vnet_id, which causes the reference to fail.
NEW QUESTION # 38
Your company has a lot of workloads in AWS , and Azure that were respectively created using CloudFormation , and AzureRM Templates. However , now your CIO has decided to use Terraform for all new projects , and has asked you to check how to integrate the existing environment with terraform code. What should be your next plan of action?
- A. Tell the CIO that this is not possible . Resources created in CloudFormation , and AzureRM templates cannot be tracked using terraform.
- B. This is only possible in Terraform Enterprise , which has the TerraformConverter exe that can take any other template language like AzureRM and convert to Terraform code.
- C. Just write the terraform config file for the new resources , and run terraform apply , the state file will automatically be updated with the details of the new resources to be imported.
- D. Use terraform import command to import each resource one by one .
Answer: D
NEW QUESTION # 39
What is the name assigned by Terraform to reference this resource?
- A. azurerm_resource_group
- B. dev
- C. test
- D. azurerm
Answer: C
NEW QUESTION # 40
Which one is the right way to import a local module names consul?
- A. module "consul" { source = "consul"}
- B. module "consul" { source = "../consul"}
- C. module "consul" { source = "module/consul"}
- D. module "consul" { source = "./consul"}
Answer: B,D
Explanation:
A local path must begin with either ./ or ../ to indicate that a local path is intended, to distinguish from a module registry address.
module "consul" {
source = "./consul"
}
NEW QUESTION # 41
You just scaled your VM infrastructure and realized you set the count variable to the wrong value. You correct the value and save your change.
What do you do next to make your infrastructure match your configuration?
- A. Inspect all Terraform outputs to make sure they are correct
- B. Inspect your Terraform state because you want to change it
- C. Run an apply and confirm the planned changes
- D. Reinitialize because your configuration has changed
Answer: A
NEW QUESTION # 42
Terraform plan updates your state file.
- A. True
- B. False
Answer: B
NEW QUESTION # 43
Terraform Enterprise (also referred to as pTFE) requires what type of backend database for a clustered
deployment?
- A. PostgreSQL
- B. Cassandra
- C. MySQL
- D. MSSQL
Answer: A
Explanation:
Explanation
External Services mode stores the majority of the stateful data used by the instance in an external PostgreSQL
database and an external S3-compatible endpoint or Azure blob storage. There is still critical data stored on the
instance that must be managed with snapshots. Be sure to check the PostgreSQL Requirements for information
that needs to be present for Terraform Enterprise to work. This option is best for users with expertise
managing PostgreSQL or users that have access to managed PostgreSQL offerings like AWS RDS.
NEW QUESTION # 44
While attempting to deploy resources into your cloud provider using Terraform. you begin to see some odd behavior and experience sluggish responses. In order to troubleshoot you decide to turn on Terraform debugging. Which environment variables must be configured to make Terraform's logging more verbose?
- A. TF.LOG.FUE
- B. TF_10G_LEVEL
- C. TF_10G_PATM
- D. TF_LOG
Answer: D
NEW QUESTION # 45
By default, where does Terraform store its state file?
- A. current working directory
- B. shared directory
- C. remotely using Terraform Cloud
- D. Amazon S3 bucket
Answer: A
Explanation:
Explanation
By default, the state file is stored in a local file named "terraform.tfstate", but it can also be stored remotely,
which works better in a team environment.
NEW QUESTION # 46
You have written a terraform IaC script which was working till yesterday , but is giving some vague error
from today , which you are unable to understand . You want more detailed logs that could potentially help you
troubleshoot the issue , and understand the root cause. What can you do to enable this setting? Please note ,
you are using terraform OSS.
- A. Terraform OSS can push all its logs to a syslog endpoint. As such, you have to set up the syslog sink,
and enable TF_LOG_PATH env variable to the syslog endpoint and all logs will automatically start
streaming. - B. Enable TF_LOG to the log level DEBUG, and then set TF_LOG_PATH to the log sink file location.
Terraform debug logs will be dumped to the sink path, even in terraform OSS. - C. Enable the TF_LOG_PATH to the log sink file location, and logging output will automatically be stored
there. - D. Detailed logs are not available in terraform OSS, except the crash message. You need to upgrade to
terraform enterprise for this point.
Answer: B
Explanation:
Explanation
Terraform has detailed logs which can be enabled by setting the TF_LOG environment variable to any value.
This will cause detailed logs to appear on stderr.
You can set TF_LOG to one of the log levels TRACE, DEBUG, INFO, WARN or ERROR to change the
verbosity of the logs. TRACE is the most verbose and it is the default if TF_LOG is set to something other
than a log level name.
To persist logged output you can set TF_LOG_PATH in order to force the log to always be appended to a
specific file when logging is enabled. Note that even when TF_LOG_PATH is set, TF_LOG must be set in
order for any logging to be enabled.
NEW QUESTION # 47
The Security Operations team of ABC Enterprise wants to mandate that all the Terraform configuration that creates an S3 bucket must have encryption feature enabled. What is the best way to achieve it?
- A. Use S3 bucket policy.
- B. Use Sentinel Policies.
- C. Create a script that checks the encryption parameter is enabled on every git commit.
- D. Shared a SOP to engineers to mandate encryption feature on S3.
Answer: B
Explanation:
Sentinel is an embedded policy-as-code framework integrated with the HashiCorp Enterprise products. It enables fine-grained, logic-based policy decisions, and can be extended to use information from external sources.
Using Sentinel with Terraform Cloud involves:
* Defining the policies - Policies are defined using the policy language with imports for parsing the Terraform plan, state and configuration.
* Managing policies for organizations - Users with permission to manage policies can add policies to their organization by configuring VCS integration or uploading policy sets through the API. They also define which workspaces the policy sets are checked against during runs. (More about permissions.)
* Enforcing policy checks on runs - Policies are checked when a run is performed, after the terraform plan but before it can be confirmed or the terraform apply is executed.
* Mocking Sentinel Terraform data - Terraform Cloud provides the ability to generate mock data for any run within a workspace. This data can be used with the Sentinel CLI to test policies before deployment.
https://www.terraform.io/docs/cloud/sentinel/index.html
NEW QUESTION # 48
What is one disadvantage of using dynamic blocks in Terraform?
- A. They make configuration harder to read and understand
- B. Dynamic blocks can construct repeatable nested blocks
- C. They cannot be used to loop through a list of values
- D. Terraform will run more slowly
Answer: C
Explanation:
Explanation/Reference: https://github.com/hashicorp/terraform/issues/19291
NEW QUESTION # 49
You have created a custom variable definition file my_vars.tfvars. How will you use it for provisioning
infrastructure?
- A. terraform apply -var-state-file ="my_vars.tfvars"
- B. terraform apply var-file="my_vars.tfvars"
- C. terraform plan -var-file="my_vars.tfvar"
- D. terraform apply -var-file="my_vars.tfvars"
Answer: D
Explanation:
Explanation
To set lots of variables, it is more convenient to specify their values in a variable definitions file (with a
filename ending in either .tfvars or .tfvars.json) and then specify that file on the command line with -var-file:
terraform apply -var-file="my_vars.tfvars"
https://www.terraform.io/docs/configuration/variables.html#variable-definitions-tfvars-files
NEW QUESTION # 50
terraform validate validate validates that your infrastructure matches the Terraform state file.
- A. True
- B. False
Answer: B
Explanation:
Explanation
The terraform validate command validates the configuration files in a directory, referring only to the
configuration and not accessing any remote services such as remote state, provider APIs, etc. Validate runs
checks that verify whether a configuration is syntactically valid and internally consistent, regardless of any
provided variables or existing state. It is thus primarily useful for general verification of reusable modules,
including correctness of attribute names and value types. Source:
https://www.terraform.io/cli/commands/validate
NEW QUESTION # 51
......
Certification Topics of TA-002-P Exam PDF Recently Updated Questions: https://examtorrent.actual4test.com/TA-002-P_examcollection.html